AWS Certified Advanced Networking - Specialty ANS-C01 — Topic 1 Question 267

Question

A company wants to analyze TCP internet traffic. The traffic originates from Amazon EC2 instances in the company’s VPC. The EC2 instances initiate connections through a NAT gateway. The company wants to capture data about the traffic including source and destination IP addresses ports, and the first 8 bytes of the TCP segments of the traffic. The company needs to collect, store, and analyze all the required data points. Which solution will meet these requirements?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Configure the NAT gateway to be a VPC traffic mirror source. Deploy software on the traffic mirror target to forward the data to an Amazon S3 bucket. Analyze the data by using Amazon Athena. Amazon S3 provides durable, scalable object storage that is fully managed. A NAT gateway lets private subnet resources reach the internet for outbound traffic only. Amazon Athena runs serverless SQL queries directly on data in Amazon S3 with no infrastructure to manage.

AWS Certified Advanced Networking - Specialty ANS-C01 — Question 267